Elektrine lite

← Feed

@vincentpants@social.treehouse.systems

Post #214615

2026-02-02 03:59 UTC

Oh wow. Notepad++ was hijacked by state sponsored actors. Bonkers. #infosec https://notepad-plus-plus.org/news/hijacked-incident-info-update/

Replies (13)

  • @Scmurcott@ioc.exchange 2026-02-02 04:22

    @vincentpants@social.treehouse.systems yikes not much detail on the nature of the malicious notepad++ users may be using.

    Open ##2792755

  • @JakobFel@retro-gaiden.com 2026-02-02 04:59

    @vincentpants@social.treehouse.systems I'm mildly skeptical of this for one reason only: for years now, the maintainers have been dedicating their releases to various activist causes (mostly relating to foreign geopolitics). I'm not saying this didn't happen but I'm also not going to jump the gun on this claim either until more detail comes out.

    Open ##2792765

  • @darkoneko@shelter.moe 2026-02-02 05:28

    @vincentpants@social.treehouse.systems what the fffff****

    Open ##2792767

  • @mr_daemon@untrusted.website 2026-02-02 05:44

    @vincentpants@social.treehouse.systems The upsetting part is the absolute lack of details for users. "Oh we fixed it sorry if you got a malicious payload lol, you're on your own to figure out whether or not you did and if so what it is" YEA THANKS

    Open ##2792768

  • @uhrmann@bildung.social 2026-02-02 06:34

    @vincentpants@social.treehouse.systems are there any IoC publicly available?

    Open ##2792769

  • @mast0d0nphan@beige.party 2026-02-02 07:09

    @vincentpants@social.treehouse.systems Reason n±1 to #SwitchToLinux.

    Open ##2792771

  • @fabyyiola@techhub.social 2026-02-02 07:20

    @vincentpants@social.treehouse.systems dang, imagine the guy that had to send the email to the customers :X

    Open ##2792791

  • @TomGwozdz@oldbytes.space 2026-02-02 08:19

    @vincentpants@social.treehouse.systems a couple months ago, a large company I work with force removed nodepad++ from all computers in the company without saying why. I guess this explains that.

    Open ##2792792

  • @Kerplunk@mastodon.scot 2026-02-02 08:50

    @vincentpants@social.treehouse.systems Oh wow. Notepad++ was hijacked by state sponsored actors. the threat acotor is likely a Chinese state-sponsored group Funny how it is always supposedly a chinese threat, despite now full fascist usa being the no 1 spying nation on the planet.

    Open ##2792793

  • @snailerotica@chitter.xyz 2026-02-02 09:52

    @vincentpants@social.treehouse.systems again? must be a day ending in y

    Open ##2792796

  • @vincentpants@social.treehouse.systems Can we just not have every piece of software try to connect to the internet, please? So many hobbyist and open-source projects have added auto-updaters and this story is exactly something I was worried about.

    Open ##2792797

  • @vincentpants@social.treehouse.systems Can we just not have every piece of software try to connect to the internet, please? So many hobbyist and open-source projects have added auto-updaters and this story is exactly something I was worried about.

    Open ##2792798

  • @agowa338@chaos.social 2026-02-02 16:32

    @vincentpants@social.treehouse.systems again? Or still the one from a few months ago?

    Open ##2792799